Detections
Analytics
CVE-2021-3560
high
Description
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
References
http://packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html
http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html
https://github.com/Jeanback1/exploit-vault
https://github.com/adakoifman/CVE-2021-3560
https://github.com/Jeanback1/CVE-2023-30253-exploit
https://github.com/Jeanback1/CVE-2021-3560-exploit
https://github.com/realatharva15/polkit-CVE-2021-3560_writeup
https://github.com/m4lk3rnel/CVE-2021-3560
https://github.com/SeimuPVE/CVE-2021-3560_Polkit
https://github.com/V0idA2tronaut/CVEs
https://github.com/DelphineTan/CVE-Research-Writeups
https://github.com/PuddinCat/GithubRepoSpider
https://github.com/arcslash/exploit_CVE-2021-3560
https://github.com/TieuLong21Prosper/CVE-2021-3560
https://github.com/WinMin/CVE-2021-3560
https://github.com/RicterZ/CVE-2021-3560-Authentication-Agent
https://github.com/GatoGamer1155/CVE-2021-3560
https://github.com/Nosferatuvjr/Vivald0x6f
https://github.com/n3onhacks/CVE-2021-3560
https://github.com/chenaotian/CVE-2021-3560
https://github.com/TomMalvoRiddle/CVE-2021-3560
https://github.com/STEALTH-Z/CVE-2021-3560
https://github.com/LeoBreaker1411/CVE-2021-3560
https://github.com/Almorabea/Polkit-exploit
https://github.com/curtishoughton/CVE-2021-3560
https://github.com/Bin4xin/bigger-than-bigger
https://github.com/oxagast/oxasploits
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3560
https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/